{"id":"CVE-2025-48466","aliases":["EUVD-2025-18993","GHSA-3936-ppm9-g3c2"],"status":"published","title":"Modbus Command Injection without Authentication","description":"Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00557,"percentile":0.467,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-863"],"published":"2025-06-24T02:12:41Z","modified":"2026-06-17T09:29:39Z","exploits":[{"source":"pocgithub","id":"shipcod3/CVE-2025-48466","title":"shipcod3/CVE-2025-48466","date":"2025-06-17","url":"https://github.com/shipcod3/CVE-2025-48466"}],"products":[{"vendor":"advantech","product":"advantech wireless sensing and equipment (wise)"},{"vendor":"advantech","product":"wise-4010lan_firmware"},{"vendor":"advantech","product":"wise-4050lan_firmware"},{"vendor":"advantech","product":"wise-4060lan_firmware"}],"references":[{"url":"https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-061","tags":["Third Party Advisory"]},{"url":"https://github.com/shipcod3/CVE-2025-48466","tags":["Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48466"},{"url":"https://github.com/advisories/GHSA-3936-ppm9-g3c2"}],"sources":{"cve":[{"id":"CVE-2025-48466","title":"Modbus Command Injection without Authentication","description":"Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.","status":"published","published":"2025-06-24T02:12:41.743Z","modified":"2025-06-25T12:59:38.016Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:32:41.41198Z"}],"euvd":[{"id":"EUVD-2025-18993","description":"Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.","status":"published","published":"2025-06-24T02:12:41Z","modified":"2025-06-25T12:59:38Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:16.964954Z"}],"ghsa":[{"id":"GHSA-3936-ppm9-g3c2","title":"Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to...","description":"Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.","status":"published","published":"2025-06-26T21:31:04Z","modified":"2025-06-26T21:31:08Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T15:02:49.372577Z"}],"nvd":[{"id":"CVE-2025-48466","description":"Successful exploitation of the vulnerability could allow an unauthenticated, remote attacker to send Modbus TCP packets to manipulate Digital Outputs, potentially allowing remote control of relay channel which may lead to operational or safety risks.","status":"published","published":"2025-06-24T03:15:34.013Z","modified":"2026-06-17T09:29:39.86Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:11:14.091082Z"}]}}